high7.5
CVE-2016-6342
elog 3.1.1 allows remote attackers to post data as any username in the logbook.
Impact
elog 3.1.1 allows remote attackers to post data as any username in the logbook.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fedoraproject | Fedora | Version 24 |
| Elog Project | Elog | Version 3.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=1371328
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ZQOPXSMJAJIXH5MRPQS2ZISYJPSLQK/
- https://bugzilla.redhat.com/show_bug.cgi?id=1371328
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ZQOPXSMJAJIXH5MRPQS2ZISYJPSLQK/